GDPR is in force from 25 May 2018 and requires organisations to explain their privacy policy and how they deal with personal data that has been ascertained and retained during the course of their workIn the case of Bridgwater International the Nature of our work is Travel Agent. Although our business is very small and we only hold information temporarily in order to assist in the booking of flights and registration at hotels we have been compelled to register with ICO (ref A8338267) for £35 and to explain our privacy policy and the nature of how we may use that information.
The information below is from the ICO advisory site pertaining to ALL travel agents.
Description of processing
The following is a broad description of the way this organisation/data controller processes personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received, check any privacy notices the organisation has provided or contact the organisation to ask about your personal circumstances.
Reasons/purposes for processing information
We process personal information to enable us to provide travel agency services to our customers, to promote our services, to maintain our accounts and records and to manage and support our employees.
Type/classes of information processed
We process information relevant to the above reasons/purposes. This may include:
personal details
financial details
goods and services provided
We also process sensitive classes of information that may include:
physical or mental health details
racial or ethnic origin
religious or other beliefs of a similar nature
trade union membership
information about offences and alleged offences
criminal proceedings, outcomes and sentences
visual images, personal appearance and behaviour
Who the information is processed about
We process personal information about:
customers
complainants and enquirers
professional advisers and consultants
employees
Who the information may be shared with
We sometimes need to share the personal information we process with the individual themselves, their relatives, guardians or other representatives and also with other organisations. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons.
Where necessary or required we share information with:
education and examining bodies
employment and recruitment companies
suppliers and service providers
financial organisations
business associates and professional advisers
credit reference agencies
debt collection and tracing agencies
private investigators
police forces
security organisations
central government
Our organisation address is:
Bridgwater International 10 Castle Street, Bridgwater TA63DB United Kingdom
Brian Smedley (as Sole Trader/ Self Employed) is the responsible individual
07772402671
bridgwaterinternational@gmail.com